CVE-2015-4464
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication...
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
- Record
CVE-2015-4464- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
- Record
CVE-2015-4464- Updated
- 2026-11-02
EUVDEUVD-2015-4484 No score
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
- Record
EUVD-2015-4484- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j4pr-v554-qjg5
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication...
Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.
- Record
GHSA-j4pr-v554-qjg5- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-4464 is a critical vulnerability (CVSS 9.8) in Kguardsecurity Kg-sha104 Firmware, published August 18, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.66%, the 91st percentile. No source names a fixed version.
References
packetstormsecurity.com/files/132437/Kguard-Digital-Video-Recorder-Bypass-Issues.html
securityfocus.com/archive/1/535822/100/0/threaded
academia.edu/11677554/Kguard_Digital_Video_Recorders_Multiple_Vulnerabilities
nvd.nist.gov/vuln/detail/CVE-2015-4464
github.com/advisories/GHSA-j4pr-v554-qjg5